Privacy Policy

1. Information We Collect

We collect information you provide directly to us and information collected automatically when you use the Site.

• Contact & booking information: name, email address, phone number, preferred experience, date, party size, and any details you include in inquiries.
• Payment information: processed directly by Stripe, Inc. We do not store full card numbers, CVV codes, or bank credentials. We receive limited metadata (last four digits, brand, billing ZIP, transaction status).
• Technical data: IP address, browser type, device identifiers, referring pages, and interaction events used to operate and secure the Site.
• Cookies & similar technologies: cookies and browser storage used for checkout, saved reservation drafts, analytics, and campaign attribution.
• Campaign attribution: campaign parameters (UTMs), Google and Meta ad click identifiers (such as GCLID and FBCLID), referral codes, your first landing page, and the referring website. We remember the first source and most recent campaign click to understand how visitors discover us and return to make an inquiry or booking.
• Contact-click activity: when you tap a phone or WhatsApp link, we record a Contact event identifying the contact method and where the link appeared. This event does not include your name, email address, phone number, or WhatsApp message contents. It records the tap, not whether a call connected or a message was sent.

2. How We Use Your Information

• Respond to inquiries and confirm bookings.
• Process deposits and final balances through Stripe.
• Communicate scheduling, weather, and operational updates.
• Improve the Site, prevent fraud, and comply with legal obligations.
• Measure campaign performance and contact clicks, and associate campaign sources with inquiries and bookings in our customer relationship management system. Facebook and Instagram ad inquiries may be categorized as Meta Ads and carry campaign or marketing-partner labels such as UADV.
• Send occasional marketing about experiences (only with your consent; opt out any time).

3. Third-Party Service Providers

We share information needed to operate the Site, manage inquiries, and measure marketing performance with service providers. Advertising platforms may also process information under their own privacy policies:

• Stripe for payment processing (stripe.com/privacy).
• Hosting & database providers for secure cloud infrastructure for the Site and our internal records.
• Email delivery providers to send confirmations and operational notices.
• Google Analytics 4 and Google Ads for website analytics and advertising measurement. Google Tag Manager manages tracking tags; the information collected depends on the tags enabled. See Google's Privacy Policy.
• Zoho CRM and SalesIQ for inquiry management, campaign attribution, and visitor interactions.
• Meta (Facebook and Instagram): when a Meta Pixel or related tag is enabled, contact-click activity may be shared with Meta for advertising measurement. Meta may also receive browser, device, cookie, and page information through its tracking technology. See Meta's Privacy Policy.
• WhatsApp: opening a WhatsApp link takes you to a service operated by Meta. Booking-assistance links may prefill your booking details in a message for you to review. You choose whether to send that message; WhatsApp's own privacy terms apply to use of its service.

We do not sell your personal information.

4. Data Retention

We retain booking and transaction records for as long as required by tax, accounting, and consumer-protection laws (typically 7 years). Inquiry data not resulting in a booking is retained for up to 24 months.

Campaign attribution and first-visit information are stored in your browser's localStorage for up to 90 days per stored record. A new campaign click may start a new 90-day period for the most recent source. Expired records are discarded when the Site next reads them. Saved reservation drafts expire after 24 hours. Campaign information already associated with an inquiry or booking follows the record-retention periods above, rather than the browser's 90-day period.

5. Your Rights

Depending on your jurisdiction (including the EU/UK under GDPR and California under the CCPA/CPRA), you may have the right to:

• Access the personal information we hold about you.
• Request correction or deletion of your information.
• Object to or restrict certain processing.
• Withdraw marketing consent at any time.
• Where applicable, opt out of sharing personal information for cross-context behavioral advertising.
• Lodge a complaint with your local data-protection authority.

To exercise any of these rights, email info@primeyachtsmiami.com.

You can delete cookies and localStorage through your browser's site-data settings or restrict tracking using browser privacy controls. Clearing site data also removes saved reservation drafts and remembered campaign sources; it does not delete bookings or inquiries already submitted to us. Advertising preferences can also be managed through your Google or Meta account settings.

6. Security

We use industry-standard safeguards including TLS encryption in transit, encrypted storage at rest, access controls, and PCI-DSS-compliant payment processing via Stripe. No system is perfectly secure; please notify us immediately if you suspect unauthorized access.

7. Children's Privacy

The Site and our experiences are intended for guests aged 18 and over. We do not knowingly collect personal information from children under 13.

8. International Transfers

We operate from the United States. If you access the Site from outside the US, your information will be transferred to and processed in the US under safeguards required by applicable law.

9. Changes to This Policy

We may update this policy from time to time. The "Last updated" date above reflects the most recent revision. Material changes will be highlighted on the Site.

10. Contact

Read our Terms & Conditions